elddy/Windows-NTAPI-Injector external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

elddy/Windows-NTAPI-Injector

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/elddy/Windows-NTAPI-Injector)

Close

elddy / Windows-NTAPI-InjectorView on GitHubMore

• External links
• Readme badge

Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses

☆40Dec 9, 2020Updated 5 years ago

Alternatives and similar repositories for Windows-NTAPI-Injector

Users that are interested in Windows-NTAPI-Injector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• x0reaxeax / SyscallHookBypass

  View on GitHub
  NTAPI hook bypass with (semi) legit stack trace
  ☆19May 9, 2023Updated 3 years ago
• whydee86 / FUD-ShellCode-UUID

  View on GitHub
  Making Shellcode fully undetectable using uuid
  ☆23May 7, 2021Updated 5 years ago
• oXis / DoublePulsarPayload

  View on GitHub
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆31Nov 9, 2021Updated 4 years ago
• sv3nbeast / ImgLoaderShellCode

  View on GitHub
  ☆36Sep 7, 2020Updated 5 years ago
• redteamertips / DinvokeDupetokenAndThreadSwitcheroo

  View on GitHub
  ☆26May 22, 2021Updated 4 years ago
• Deploy open-source AI quickly and easily - Special Bonus Offer • Ad
  Runpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
• zha0 / BloodyAv

  View on GitHub
  BloodyAv is Custom Shell Code loader to Bypass Av and Edr.
  ☆15Mar 21, 2022Updated 4 years ago
• x0reaxeax / Fetch-n-Exec

  View on GitHub
  An x64 binary executing code that's not inside of it.
  ☆17Feb 28, 2023Updated 3 years ago
• slyd0g / XORShellcodeLoader

  View on GitHub
  Loads shellcode from a resource file.
  ☆21Aug 15, 2019Updated 6 years ago
• idiotc4t / Schrodinger-s-Cat

  View on GitHub
  Shellcode antivirus evasion framework
  ☆27Jan 16, 2021Updated 5 years ago
• ntestoc3 / bypassAV

  View on GitHub
  ☆16May 14, 2021Updated 5 years ago
• x0reaxeax / SysCook64

  View on GitHub
  Indirect Syscall invocation via thread hijacking
  ☆26May 5, 2023Updated 3 years ago
• li-xiao-qing / hpsocket-demo

  View on GitHub
  基于 HP-Socket 实现的 Client / Server
  ☆15Jan 4, 2024Updated 2 years ago
• janoglezcampos / FindItByCalls

  View on GitHub
  Hacky code for extracting calls in DLLs by function
  ☆17Jun 3, 2022Updated 3 years ago
• timwhitez / JmpUnhook

  View on GitHub
  Ntdll Unhooking POC
  ☆19Aug 12, 2022Updated 3 years ago
• Proton VPN Special Offer - Get 70% off • Ad
  Special partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
• Kara-4search / PEB-PPIDspoofing_Csharp

  View on GitHub
  Command line & PPID spoofing
  ☆30Apr 15, 2023Updated 3 years ago
• elddy / Nim-Reverse-Shell

  View on GitHub
  Interactive Windows Reverse Shell Server/Client
  ☆42Feb 24, 2021Updated 5 years ago
• ricemiller / ShellcodeInjectionObfuscation

  View on GitHub
  ☆11Jan 29, 2021Updated 5 years ago
• freakanonymous / DLL_ROOTKIT_loader

  View on GitHub
  Rootkit loader for your rootkit dll, x86/x64 system wide DLL injection (+appinit_dlls registry create) uses heavens gate
  ☆21Jan 28, 2021Updated 5 years ago
• boku7 / AsmHalosGate

  View on GitHub
  x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks
  ☆238Mar 8, 2023Updated 3 years ago
• 5h3r10ck / antivirus-evasion

  View on GitHub
  Applying some AV evasion techniques on a metasploit reverse shell
  ☆18Nov 12, 2020Updated 5 years ago
• aaaddress1 / wowInjector

  View on GitHub
  PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)
  ☆166May 27, 2021Updated 4 years ago
• bats3c / DefensiveInjector

  View on GitHub
  Shellcode injector using direct syscalls
  ☆123Aug 17, 2020Updated 5 years ago
• jlvsjp / WinPwdStealer

  View on GitHub
  Get/dump chrome and firefox saved passwords.
  ☆20Sep 13, 2020Updated 5 years ago
• Serverless GPU API endpoints on Runpod - Get Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• vysecurity / WindfarmDynamite-CNA

  View on GitHub
  CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe
  ☆16Jul 6, 2019Updated 6 years ago
• 11philip22 / uuid-to-shellcode

  View on GitHub
  Shellcode loader that loads shellcode from UUID's
  ☆23Mar 17, 2026Updated 2 months ago
• kdiixu / Ring0Hook

  View on GitHub
  ☆12Aug 28, 2017Updated 8 years ago
• thesnoom / extps-cobalt-strike-bof

  View on GitHub
  Extended Process List (Search functionality)
  ☆29Jan 23, 2021Updated 5 years ago
• HadesW / HttpRAT

  View on GitHub
  HTTPS GET RAT and Memory Loader
  ☆26Jun 10, 2025Updated 11 months ago
• forrest-orr / phantom-dll-hollower-poc

  View on GitHub
  Phantom DLL hollowing PoC
  ☆373May 23, 2022Updated 3 years ago
• wanttobeno / DllProtect

  View on GitHub
  dll文件加解密和内存加载
  ☆128Oct 18, 2018Updated 7 years ago
• Snowming04 / InjectProcess

  View on GitHub
  寻找可注入进程
  ☆13Jul 16, 2020Updated 5 years ago
• aaaddress1 / wow64Jit

  View on GitHub
  Call 32bit NtDLL API directly from WoW64 Layer
  ☆61Nov 18, 2020Updated 5 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• boku7 / halosgate-ps

  View on GitHub
  Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes
  ☆108Mar 8, 2023Updated 3 years ago
• Snowming04 / inject_shellcode_message_hook

  View on GitHub
  inject shellcode into remote process via message hook
  ☆15Oct 28, 2020Updated 5 years ago
• Signal-Labs / NtdllUnpatcher

  View on GitHub
  Example code for EDR bypassing
  ☆151Mar 7, 2019Updated 7 years ago
• hypn4 / FuckTP

  View on GitHub
  ☆21Sep 17, 2019Updated 6 years ago
• OlivierLaflamme / DNSWho

  View on GitHub
  transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV
  ☆50Jan 19, 2021Updated 5 years ago
• huoji120 / numen

  View on GitHub
  简单安排一下 autochk.sys 这个rootkit
  ☆73Mar 7, 2023Updated 3 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp

  View on GitHub
  Load shellcode via syscall
  ☆56Jul 28, 2021Updated 4 years ago